This notice relates specifically to supporters, volunteers and members of the public not already covered by our Privacy Note (Students and Young People) or Privacy Notice (Staff). This links to our Cookies policy, and explains our use of Facebook’s pixel and audience-based advertising.
Who we are
In this policy the words ‘we’, ‘us’ or ‘our’ refer to InFocus. (InFocus Charity, Company Number 06938379; InFocus (West of England) Registered Charity Number 1058937).
InFocus acts as the data controller, and decides how your personal data is processed and for what purposes.
The InFocus Data Protection Officer is Jane Nutt
InFocus Charity
Topsham Road
Countess Wear
EXETER, EX2 6HA
Phone number: 01392 454200
The types of information we collect
We currently collect and process the following information:
- Data generated when you access our website. This may include your device’s ID, IP address, operating system and browser type. This information helps us to produce anonymised data about our users’ browser behaviours. Our website also uses cookies (a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing).
- Personal identifiers, contacts and characteristics (for example, name and contact detail). Examples of this might be if you email us, sign up to a mailing list or interact with our social media pages.
- Recruitment information for prospective members of staff who submit digital or paper-based application forms for employment. This might include copies of right to work documentation, criminal record, references and other information included in a CV or cover letter or as part of the application process
- Financial information relating to charitable donations and/or payments for services and events made through our website.
What is the legal basis for processing your personal data?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- Your consent. An example of this would be asking us to send you a newsletter. You are able to withdraw your consent at any time. You can do this by contacting the Fundraising team who manage data for supporters, volunteers and members of the public (i.e. individuals not covered by the Privacy Notice (Students and Young People) or the Privacy Notice (Staff). Email the Fundraising team or telephone 01392 454200
- Legitimate interest. An example of this would be processing your personal data in order to respond to an enquiry or donation you make in the manner you would expect.
- We have a contractual obligation. An example of this would be processing information in connection with a training course or challenge event organised by InFocus.
- We have a legal obligation. An example of this is retaining financial records for 6 years to comply with HMRC audit requirements.
What we do with the information
We comply with our obligations under the “GDPR” by: keeping personal data up to date; only using it for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; storing and destroying it securely; not collecting or retaining excessive amounts of data or retaining data; protecting personal data from loss, misuse, unauthorised access and disclosure; ensuring that appropriate technical measures are in place to protect personal data; storing it for no longer than is necessary for the purposes for which the personal data is processed
We use personal data to:
- Fundraise for and promote the interests of InFocus
- Maintain our own accounts and records (including the processing of Gift Aid claims)
- Manage volunteers and employees*
- Inform you of news, events and activities at InFocus
- Communicate with our supporters, dealing with your enquiries and requests, and recording any contact with you
*InFocus employees are covered by a separate Privacy Notice (Staff), available from the intranet.
How we store your information
Information is stored by us on secure computers located in the UK, and on our secure supporter database (Donorfy) and personnel system (HealthBoxHR). We may also store information on paper files.
Sharing your personal data
Your personal data may be shared with selected third-party suppliers and partners who are engaged to process data on our behalf (e.g. we use Donorfy as our CRM system and Mailchimp to send you emails). In such cases information is only shared for the purpose of providing services relating to communications, and is conducted under relevant Data Processing Agreements.
We also may need to disclose your information if required to do so by law or as expressly permitted under applicable data protection legislation.
We do not sell or otherwise provide any personal details to other charities or other third parties.
Your data protection rights
Unless subject to exemption under the GDPR, you have the following rights with respect to your personal data:
- The right to request a copy of the personal data which we hold about you;
- The right to request that we correct your personal data if it is found to be inaccurate or out of date;
- The right to request your personal date is erased;
- The right to withdraw your consent to the processing at any time;
- The right to request that the data controller provide the data subject with their personal data and where possible, to transmit that data directly to another data controller (known as the right to data portability);
- The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
- The right to object to the processing of personal data (where applicable);
- The right to lodge a complaint with the Information Commissioner’s Office.
Online activities: Cookies, Beacons and similar technology
Information about how this website uses Cookies is provided in our Cookie policy
Facebook Pixel
We use Facebook Inc.’s “Facebook Pixel” to track your behaviour after you’ve seen or clicked on a Facebook ad.
This allows us to evaluate the impact of Facebook ads (e.g. for job roles at InFocus) and to show you advertising that’s more relevant to you. We can’t see your data, but Facebook may save and process it. The pixel will track which pages you visit – and when.
You can opt-out of tracking by Facebook pixel by changing your Ad preferences in Facebook.
Facebook Audience-based Advertising
We may also use Facebook’s “Custom Audiences” to find our supporters and other customers who are already users of Facebook, so that we can provide you with content that is more relevant to you.
You can opt-out of Audience-based advertising by changing your Ad preferences in Facebook.
Contact details
To exercise all relevant rights, queries or complaints about the way we process your data please in the first instance contact the Data Protection Officer on 01395 454200 or Email Jane Nutt. You can also write to InFocus, Topsham Road, Countess Wear, Exeter, EX2 6HA.
You can contact the Information Commissioner’s Office via their website or 0303 123 113